611 matches found
Insulin Pump Hack Garners Federal Attention
The hack of a commercially available insulin pump earlier this month at the DEFCON hacker conference has attracted the attention of members of the House Energy & Commerce Committee, which is now calling for a formal review of wireless medical devices like the pump. Senior Committee members Anna G...
NIBE heat pump - Remote Code Execution
NIBE heat pump - Remote Code Execution !/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is running with root rights def fingerheatpumpip, port: s = socket.socketsocket.AFINET, socket.SOCKSTREAM...
NIBE heat pump LFI Exploit
Exploit for hardware platform in category remote exploits ========================== NIBE heat pump LFI Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to...
NIBE heat pump - Local File Inclusion
!/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 which made me test the heat pumps and...
NIBE Heat Pump RCE Exploit
Exploit for hardware platform in category remote exploits ========================== NIBE Heat Pump RCE Exploit ========================== !/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is...
NIBE Heat Pump Local File Inclusion
!/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274 which made me test the heat pumps and...
NIBE Heat Pump Remote Command Execution
!/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is running with root rights def fingerheatpumpip, port: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectip, port s.send"GET /...
NIBE heat pump - Local File Inclusion
NIBE heat pump - Local File Inclusion !/usr/bin/python import socket,sys,os,base64 NIBE heat pump LFI exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Special thanks to Fredrik Nordberg Almroth and Mathias Karlsson for obtaining this information http://h.ackack.net/?p=274...
NIBE heat pump - Remote Code Execution
!/usr/bin/python import socket,sys,os,base64 NIBE heat pump RCE exploit Written by Jelmer de Hen Published at http://h.ackack.net/?p=302 Web interface is running with root rights def fingerheatpumpip, port: s = socket.socketsocket.AFINET, socket.SOCKSTREAM s.connectip, port s.send"GET /...
Oracle Database Multiple Vulnerabilities (January 2010 CPU)
The remote Oracle database server is missing the January 2010 Critical Patch Update CPU and therefore is potentially affected by security issues in the following components : - Listener - Oracle OLAP - Application Express Application Builder - Oracle Data Pump - Oracle Spatial - Logical Standby -...
CVE-2009-3411
Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
Design/Logic Flaw
Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
CVE-2009-3411
CVE-2009-3411 (Oracle Data Pump) affects Oracle Database components including Data Pump across multiple versions (11.1.0.7; 10.2.0.3/0.4; 10.1.0.5; 9.2.0.8/9.2.0.8DV). The vulnerability allows remote authenticated users to impact confidentiality and integrity via unknown vectors due to an unspeci...
CVE-2009-3411
Unspecified vulnerability in the Oracle Data Pump component in Oracle Database 11.1.0.7, 10.2.0.3, 10.2.0.4, 10.1.0.5, 9.2.0.8, and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity via unknown vectors...
ATM, Gas Pump Skimming On The Rise
Criminals hit ATMs in two states over the recent holidays to skim account numbers and PINs from customers in North Carolina and Florida, according to police. Read the full article. BankInfoSecurity.com...
Spammer Gets Over 4-Year Sentence
Alan M. Ralsky, the “Godfather of Spam,” was sentenced to 51 months in prison for long term involvement in pump and dump schemes. Read the full article. Washington Post...
Oracle Database SYS.KUPW-WORKER Package MAIN Procedure SQL Injection (CVE-2006-3698)
Oracle Database Server is an enterprise-level relational database application suite. To extend the functionality of the Oracle Database Server, extra packages of related program objects, i.e. procedures, functions, variables, constants, cursors, and exceptions, are provided in order to better...
Design/Logic Flaw
Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors...